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RE: Dominion Voting Systems - Democracy Suite 5.5 Voting System Examination 

In accordance with my appointment by the Texas Secretary of State as a voting system examiner 
under Tex. Elec. Code §122.067, I present my report on the voting system examination which 
took place on January 16-17, 2019, in the offices of the Texas Secretary of State at the James E. 
Rudder Building, 1019 Brazos, Austin, Texas 78701. 

On January 16-17, 2019, the examiners appointed by the Texas Secretary of State and the Texas 
Attorney General examined Democracy Suite 5.5, a voting system that was presented by 
Dominion Voting Systems, Inc. for certification in Texas. According to the revised Eorm 100 
that was provided to the office of the Texas Secretary of State during the examination, the 
equipment, software, and components that were considered for certification are the following: 


Component 

Version 

Previous Texas Certification Date 

EMS - Election Management System 

5.5.12.1 

None 

ADJ - Adjudication 

5.5.8.1 

None 

ICC - ImageCast Central 

5.5.3.0002 

None 

ICX - ImageCast X BMD 
(Ballot Marking Device) 

5.5.10.25 

None 

ICX - ImageCast X DRE w/ VVPAT 
(Direct Recording Electronic w/ Voter 
Verified Paper Audit Trail) 

5.5.10.25 

None 

ICP - ImageCast Precinct 

5.5.3.0002 

None 

ICX - ImageCast X BMD Classic 15” 

5.5.10.25 

None 

ICX - ImageCast X BMD Classic 21” 

5.5.10.25 

None 




Page 2 


For the reasons outlined below, I am unable to recommend that this system be certified by the 
Texas Secretary of State under Tex. Elec. Code §§122.031 and 122.039. 


Background 

Dominion Voting Systems previously sought certification in Texas for the Assure 1.3 Voting 
System in August of 2012. That certification was denied in March 2013. 

The present voting system, Democracy Suite 5.5, was certified by the U.S. Election Assistance 
Commission (“EAC”) on September 14, 2018. 


Summary of the Examination 

The bulk of the examination of Democracy Suite 5.5 took place on January 16-17, 2019. 
However, throughout the course of the examination, several complications occurred which made 
it challenging to properly assess the voting system provided by the vendor and which caused 
delays in the examination process. 

Eirst, although the agenda provided to the vendor indicated that the majority of the first day of 
the examination would involve the installation of the software and firmware for the equipment 
from a trusted build of the software provided by the EAC, the vendor arrived with all firmware 
and software already installed on all of the equipment. The vendor was instructed to remove all 
software before the examination could begin, so that the examiners could verify that the version 
of the software being examined was the same version that had been previously certified by the 
EAC. 

Second, at the time of the examination. Dominion was unable to prepare the ImageCast X BMD 
Classic devices for the accessibility testing phase. As a result, the accessibility testing did not 
take place until the following week on January 23, 2019. 

Third, the vendor had to revise portions of their documentation and provide current versions of 
their EAC reports on multiple occasions throughout the exam. The current version of the Eorm 
100 was revised multiple times during the course of the examination to include all equipment 
that the vendor sought certification for and to correct mistakes on the reported version numbers 
for multiple pieces of equipment. 

Other errors occurred throughout the set-up and installation process. While none of those errors 
individually would be a basis for a recommendation to deny certification, as a whole the 
frequency of those errors raises substantial questions about the quality of the system and whether 
a county with low technical knowledge would be able to effectively implement this equipment 
without experiencing numerous and substantial errors that may impact the efficiency of the 
election process. 
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Analysis 

The standards for a voting system in Texas are outlined in Texas Eleetion Code Chapter 122. 

Speeifieally, the system may only be eertified for use in Texas if it satisfies eaeh of an 

enumerated list of requirements eontained in Texas Eleetion Code §122.001. Beeause the 

system does not satisfy eaeh of those requirements, I would reeommend against eertifieation of 

this system. 

Several issues oeeurred during the exam that support this eonelusion, ineluding: 

• The ICP preeinet seanner / ballot box system presents some issues relating to ballot seereey. 
Eirst, when a paper jam oeeurs while seanning a ballot, the only way to elear that paper jam 
is to break the seals, detaeh the ICP seanner, and physieally remove the ballot. During this 
proeess, a poll worker would be able to see the voter’s ehoiees. Seeond, the emergeney 
ballot slot on the ballot box is a puneh-out slot that eannot be resealed onee it is open. This 
may result in unauthorized aeeess to those ballots and would require a new ballot box eaeh 
time the emergeney slot is used. 

• The ICX Prime DRE with VVPAT presented an issue whieh indieates that it is not suitable 
for the purpose for whieh it is intended. During the examination one of the examiners was 
able to diseonneet the “pigtail” eonneetor whieh linked the VVPAT printer to the DRE 
deviee. When the VVPAT deviee was reeonneeted, the DRE deviee presented an error 
message then shut itself down. The faet that an individual eould easily diseonneet a 
eomponent of the system and disable the ballot easting deviee indieates that the deviee is not 
suitable for its intended purpose. 

• The ICX Prime BMD also presented an issue whieh indieates that it is not suitable for the 
purpose for whieh it is intended. During a voting session during the aeeessibility testing, the 
printer tray somehow beeame dislodged without the examiner notieing. The examiner was 
not alerted to the issue until the end of the voting session when the ballot was oast and 
attempted to print. The deviee presented an error message that had to be oleared by the poll 
worker. Onee that error message was oleared and the printer tray was fixed, the deviee 
returned to the start soreen and all the voter’s ehoiees were lost without printing a ballot 
refleoting those ehoiees. 

• The UI for easting a ballot may not be fully oompliant with the straight-party voting 
requirement. The system allows a straight-party vote to be cast, but when a voter makes a 
“cross-over” selection for a candidate of a different party than their straight-party selection, 
the straight-party selection is unselected. The candidates who had already been selected by 
the straight-party vote remained selected, but the straight-party vote itself had been 
unselected. This may cause confusion for voters who attempt to vote straight-party using this 
system. 

• The Adjudication and EMS software components encountered several issues during the set¬ 
up and configuration process which demonstrate that they may not be suitable for the purpose 
for which they are intended. During the setup process, the adjudication software had to be 
restarted multiple times due to configuration issues with other EMS software components. 
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The vendor appeared to have some difficulty addressing these errors, which raises questions 
about whether political subdivisions with low technical expertise would be able to use the 
software without relying heavily on support from the vendor. 

• The system does not provide an adequate solution for the non-sequential ballot numbering 
requirement. The system itself does not provide a means for those serial numbers to be 
printed during the voting process. A political subdivision could still comply with this 
requirement if this system were adopted, but they would have to hand-write or pre-print those 
serial numbers on the ballot paper and then manually arrange them in a non-sequential 
manner. 

• The ICP precinct scanner system has a number of suitability issues. First, the scanner has a 
very low resolution, meaning that the scanned ballot images were very difficult to read 
during the adjudication process. While the scanner could count the normally tabulated votes, 
this presented problems when trying to identify write-in candidates, since the names were 
nearly illegible with a normal pen. The names were more legible when a thick Sharpie was 
used to write the name, but it was still a challenge to identify the write-in name. Second, the 
scanner was very slow in scanning ballots. While this is not a significant flaw on its own, 
that slow scanning speed could create additional delays at the polling place. 

• The ICX ballot casting devices also presented problems during the accessibility testing 
portion of the exam which demonstrate that it may not be suitable as an accessible voting 
system. While the system provides audio instructions during an accessibility session, there 
are no written instructions on the screen when using the paddles or the sip-and-puff device. 
An individual with a hearing disability who also requires the accommodation of one of those 
devices would have no guidance in navigating the system. 

The paddles also function in a manner that is inconsistent with the labels on the paddles 
themselves. One button on the paddles is labelled “select”, while the other is labelled 
“scroll”. However, the “select” button is used to scroll through the choices, and the “scroll” 
button is used to select choices. This could cause significant confusion for voters using that 
accessibility device. 

These are the more significant issues that indicate that the system does not comply with the 
requirements of Texas law. Other examiners have also highlighted additional technical and 
design issues which may present problems for voters and political subdivisions if this system 
were to be adopted for use in Texas elections. 

The system has many positive features that would be helpful to political subdivisions if the 
system were certified. The use of commercial off-the-shelf products may result in lower costs 
for political subdivisions who adopt them. The system also provides flexibility for political 
subdivisions in setting up their elections, and the ballot casting devices are generally very user- 
friendly and easy to navigate. If the vendor were able to resolve the issues highlighted by the 
examiners, then future versions of this system may be suitable for use in Texas elections. 
However, I would recommend denying certification for the current version of Democracy Suite. 
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Conclusion and Recommendation 

Democracy Suite 5.5 fails to meet the necessary standards for certification under Texas Election 
Code §122.001. Therefore, I would recommend denying certification for the current version of 
Democracy Suite. Future versions of that system may be certifiable if the issues encountered by 
the examiners can be resolved to bring the system in compliance with Texas law. 



